CVE-2026-9361 | Edimax EW-7438RPn 1.12 POST Request /goform/formAccep formAccept submit-url command injection

A vulnerability was found in Edimax EW-7438RPn 1.12. It has been rated as critical. This affects the function formAccept of the file /goform/formAccep of the component POST Request Handler. This manipulation of the argument submit-url causes command injection.

This vulnerability appears as CVE-2026-9361. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.